
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json)
Hash identifier: AyelLIx3c4kJvKxvv/i8LzZpD5rIZ5aorTy8A87qihQ=
Subject key identifier: E1:1E:74:18:44:EA:5E:3C:1C:90:D1:42:86:64:B8:5F:3F:BB:24:63
Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
Manifest number: 0182
Signing time: Fri 17 Apr 2026 04:20:36 +0000
Manifest this update: Fri 17 Apr 2026 04:20:35 +0000
Manifest next update: Fri 24 Apr 2026 04:20:35 +0000
Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: 7irBJNOwnFwDv4PxInKYD8dcPeN4p34lCY8knGCh3hI=)
2: E46DBE449E8811F0A343880AC4F9AE02.roa (hash: z7YrKVgCWycEYMHa7lXz+45oMrI/HtHuNAYNjecnk68=)
3: DAF8A746E01B11F097920A16646F56BC.roa (hash: LGOwTBglBUqnmp1uBsE0bwegkvn6MaHVF43SRoKPz84=)
4: BAFD2318E01B11F088B1D0FE636F56BC.roa (hash: nFIjLEFtVNOTTMiweqb0gcEFYFfR+U3yovX2UqgW1o4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl
rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Validity
Not Before: Apr 17 04:20:35 2026 GMT
Not After : Apr 24 04:20:35 2026 GMT
Subject: CN=69e1b514-c6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:40:e8:a4:f2:ec:ef:27:cc:6f:16:ea:2a:
49:43:a3:f9:0a:b8:ad:c3:87:91:5e:ab:84:c5:c3:
03:f0:9f:a2:8b:34:af:ec:fe:0d:01:15:97:48:17:
3c:20:cd:63:e3:d4:47:c8:1d:8d:57:9d:b6:d6:08:
b8:5c:f5:40:83:be:d4:ea:a0:21:8b:81:2e:a2:79:
5b:32:0f:db:68:1a:61:36:73:44:47:eb:26:2b:87:
37:47:d6:ba:fa:36:24:18:c0:23:a7:fa:10:33:ee:
24:bf:69:df:03:a9:00:bd:64:db:0f:94:ac:4b:86:
57:51:ce:54:5d:26:a9:ef:c4:fd:f1:c3:d3:6a:d4:
4d:9d:a9:77:eb:e9:c1:46:28:59:57:86:a3:28:62:
41:99:f3:35:a9:30:91:d1:22:ab:ff:1e:93:45:48:
b4:eb:ed:5b:1f:fc:21:23:a6:7e:1a:d5:71:e4:16:
0e:58:3f:27:d9:7e:b8:0b:06:aa:1f:31:13:b4:2e:
e9:31:cb:cb:55:51:22:07:98:dc:d5:49:f6:f1:74:
de:78:6f:63:68:21:01:1f:97:a5:96:0d:97:55:9b:
54:a9:a9:fe:d9:81:19:c1:97:3b:c6:01:08:b8:57:
45:6f:29:d6:e6:5a:8a:49:54:fd:52:62:67:73:4b:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1E:74:18:44:EA:5E:3C:1C:90:D1:42:86:64:B8:5F:3F:BB:24:63
X509v3 Authority Key Identifier:
keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:a3:54:df:a2:09:07:1d:db:0f:8a:44:8c:62:81:d7:ff:5e:
fa:90:37:71:6a:60:eb:35:01:c3:ea:05:0f:eb:ff:24:7c:d6:
ac:9f:5f:bf:12:f2:6f:05:18:d5:2c:4b:ad:a2:c4:54:55:4d:
4a:d3:ce:db:45:fd:dc:ea:93:a6:22:41:0b:db:15:ee:da:3c:
a0:67:cf:3f:19:46:ae:13:af:53:f3:8c:08:b5:27:c5:75:6a:
01:1d:95:b0:60:a2:c9:6d:f1:bf:c8:92:14:27:95:f0:d7:75:
1c:19:31:e3:27:5e:f5:61:a5:7d:0d:4d:59:81:13:2b:33:6d:
7c:9c:49:af:90:14:c1:93:cc:50:0b:25:a7:97:d6:27:35:cb:
b6:62:ae:7e:f2:5f:5b:0b:ac:21:49:ee:35:6f:ed:10:5d:22:
bf:d1:dc:46:99:e2:45:fa:ba:c2:8e:19:c6:cc:c0:f1:3b:37:
1e:a4:9e:07:a7:28:7c:d8:c2:72:af:49:6d:e2:f2:64:e9:41:
fe:ec:e8:40:57:0e:91:8f:ea:62:d6:16:41:cd:2e:06:33:43:
29:e5:75:86:61:75:76:92:41:ca:68:dc:53:82:b5:3e:30:a4:
6b:6d:8d:e7:96:e2:b6:dc:3a:14:2f:fa:93:b5:c0:16:a7:30:
f2:62:40:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:17 2026 by rpki-client